Re: How to catch all web requests and other

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 08 May 1998 17:24:03 +0000

Bob Stevenson wrote:

> a) The machine that is running squid is a Sun Ultra Enterprise 2
> with 256MB of memory but it seems inadequate to serve the web requests

This machine should be more than enought to handle only 200 users.

Squid version?
Solaris version/patchlevel?
Requests/second? (before it slows down)
Any Solaris TCP/IP tuning set?
What is the process size of Squid?

> b) squid.conf says that enabling httpd_accel_uses_host_header,
> "opens a big security hole". What are these security implications
> and how can they be avoided?

This comment is only relevant when running as a pure accelerator, not
proxy/combined mode. What the comment says is that Squid can be told to
go to any server when _uses_host_header is enabled (as if it was a
proxy). Protection is done with ACL rules if needed.

---
Henrik Nordström
Received on Fri May 08 1998 - 12:13:43 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:40:07 MST